There's nothing to collect, because there's nowhere to send it.
Last reviewed 7 August 2026 · Pellet 0.20.0 and this website
This describes how the software behaves; it has not been reviewed by a lawyer, and a formal policy will replace it before Pellet is released. Everything below is accurate for the version named above and was checked against the source rather than written from memory.
The short version
Pellet has no account system, no sign-up, and no Pellet-operated server. Your vault is a folder on your own disk. The app works with the network switched off, and if this website vanished tomorrow your notes would carry on exactly as they are.
There is no analytics, no telemetry and no crash reporting in the app — not disabled by default, not present at all. You can check that the way it was checked: search the source for any analytics vendor and you'll find nothing.
What never leaves your machine
- Your notes, tasks, canvases, whiteboards and handwriting pages.
- File and folder names, tags, and the links between notes.
- What you search for, and what you have open.
- File history — every save is versioned locally, in your vault, and nowhere else.
Every connection the app can make
This is the complete list. Everything except the license check is off until you switch it on, and each one talks only to the service you pointed it at.
| Who | When | What is sent |
|---|---|---|
| Your sync relay | Only if you turn on device sync | Encrypted vault data. The sync relay is a server you run yourself — there is no Pellet-operated relay. It stores ciphertext, signatures and device ids; never note text or file names. |
| Lemon Squeezy | When you activate a license, then about once every 14 days | Your license key, a device name, and an activation id, so a license can move between machines. No vault content. Pellet keeps working offline for 30 days between successful checks. |
| Only if you connect Google Calendar | Calendar events, requested by your own machine straight from Google's API. Pellet operates no server in this path and never sees your Google password or your calendar. See “Google Calendar, specifically” below. | |
| Apple / iCloud | Only if you connect iCloud Calendar | Calendar events over CalDAV, using an app-specific password you create. |
| An ICS feed you name | Only if you subscribe to one | A read-only fetch of the URL you entered. Nothing is sent back. |
| An AI provider you choose | Only if you transcribe a handwriting page | That page, sent to Anthropic, OpenAI or Google using your own API key. One page, when you ask. |
| Unsplash | Only while you search for an image to insert | Your search term. Nothing about your vault. |
One thing we went out of our way to stop
Excalidraw, which powers Pellet's whiteboards, loads its hand-drawn fonts at runtime and — left alone — falls back to fetching them from a public CDN the first time you open a board. An offline-first app quietly making a third-party request is exactly what this page exists to rule out, so those fonts are bundled into the app and the fallback is disabled. Opening a whiteboard makes no network request.
Google Calendar, specifically
Connecting Google Calendar signs you in through Google in your own browser. Pellet never sees your Google password. What comes back is an access token, which is stored in your operating system's keychain — macOS Keychain or Windows Credential Manager — and, if you have device sync on, encrypted with your own keys alongside the rest of your settings. It is never written to your vault in plain text.
Pellet asks for one permission — see, edit, share and permanently delete all the calendars you can access — because it does all four: your events are drawn in the Calendar view, you can create, edit and delete real events from inside the app, and you can optionally push dated tasks into a calendar you pick. A read-only permission could not do that.
Every one of those requests goes from your machine to Google directly. Your calendar data is not sent to Pellet, is not stored by us, is never used for advertising or analytics, is not used to train any AI model, and is not shared with anyone.
If you switch on Pellet's local API, an AI agent can reach your calendar through it: those tools run on your machine and talk to Google directly, exactly as the app does. Read-only mode and the per-tool switches in Settings decide whether an agent may see or change any of it, and the API is off until you turn it on. Disconnecting in Settings deletes the stored token and asks Google to revoke it; you can revoke it yourself at any time atmyaccount.google.com/permissions.
Pellet's use of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.
Sync, specifically
If you turn on device sync, you host the sync relay: Pellet runs it on a computer of your own. Everything it stores is encrypted with keys that exist only on your devices — they exchange keys directly with each other at pairing and pin them there, so the relay is never asked to vouch for anybody. It can refuse to hand your data over. It cannot read it, alter it, or add to it.
This website
getpellet.app is static files. It sets no cookies, loads no third-party scripts, and embeds nothing from another domain — even the fonts are served from here rather than a font CDN. There is currently no analytics of any kind. If that changes it will be a cookie-free, privacy-respecting tool, and this page will say so before it goes live.
The web server keeps ordinary access logs — IP address, page requested, timestamp — for a short period, for security and debugging. They are not used to profile anyone and are not shared.
Children
Pellet is a general-purpose tool with no account system and collects nothing, so there is no age-gated data to speak of. It is not directed at children.
Asking about your data
There is no database to search — your data is on your disk, and the only record connected to you is a license key, if you buy one. To ask about or delete that, email privacy@getpellet.app.
Changes
If this page changes materially, the date at the top changes with it and the release notes will say so.